PodstepsPrivacy Policy
This policy explains what information Podsteps (“we”, “us”) collects when you use the Podsteps service and its integrations with third-party providers, and how we use and protect it.
Information we collect
- Account information: your name, email address and sign-in details, handled by our authentication provider.
- Workspace content: organizations, projects, site settings and content you enter to build your sites.
- Connected-account data: when you connect a provider (such as Vercel, Figma, Supabase, GitHub, Cloudflare or AWS), we receive an access token and the data needed to show and manage your resources there, such as project names, deployment status, domain status, file names and thumbnails, and published styles. We request only the permissions each feature needs.
- Site form submissions: if your published site has forms, submissions sent by your visitors are stored for you. Visitor IP addresses are stored only as one-way hashes, for abuse prevention.
- Technical logs: limited request and error logs used to operate and secure the service.
How we use information
We use information only to provide, secure and improve the service: to build and deploy your sites, keep connected resources in sync, show you status and alerts, prevent abuse, and respond to support requests. We do not sell personal information and do not use it for advertising.
Access tokens and credentials
Provider access tokens are encrypted at rest, are used only by our servers to perform actions you request or that keep your workspace in sync, and are never shown in the browser. You can revoke a connection at any time in Podsteps or in the provider's settings.
Sharing
We share information only with service providers that host and operate Podsteps (such as our database and hosting providers), with the third-party providers you choose to connect, as needed to perform the actions you request, or when required by law.
Retention and deletion
We keep your information while your account is active. When you disconnect a provider, its stored token is deleted. You can delete your account or workspace yourself in the app (Account & security, Workspace settings); deletion happens after a 30-day window in which you can cancel. You can also ask us by emailing support@reboundrelay.com.
Security
We use encryption in transit and at rest, row-level access controls, multi-factor authentication for sensitive actions, and least-privilege permissions. No system is perfectly secure, but we work to protect your information.
Children
Podsteps is not directed to children under 13, and we do not knowingly collect their personal information.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information. Contact us to make a request.
Changes
We will post any changes to this policy on this page and update the date above.